InfoSec Manager, Tendo

• 5+ years experience in Information Security, Technology Risk Management, IT Audit, and/or IT Compliance functions
• Strong working knowledge of cloud operations, and data loss prevention strategies
• Experience with audit log analysis and aggregation tools, as well as Security Information and Event Management (SIEM) tools
• Experience implementing cloud security standards for platforms such as AWS, Azure, and GCP
• Experience with HIPAA, SOC2, and similar security standards and audit processes
• Experience implementing security controls frameworks such as NIST, CSF, and HITRUST

Desirable

• The InfoSec Manager will be responsible for shaping and managing the information security function at Tendo
• They will serve as the security expert for all technical solutions by managing risks and identifying opportunities for improving security controls
• This person will collaborate with and support cross-functional teams of technical and non-technical staff to ensure security controls are functioning correctly and processes are in place to handle issues and remediations
• Design and implement standards, policies, guidelines and appropriate architectural principles to ensure that security standards are established, compliance is managed, and goals are continuously met
• Responsible for information security audits, vulnerability scanning, penetration testing, and coordinating remediation efforts, whether performed by organization or third-party personnel to ensure compliance with standards and relevance with industry norms
• Lead the implementation of industry certifications (SOC-2, HITRUST, etc.) and enact new programs or changes as regulations/requirements evolve
• Serve as a focal point of contact for the information security team, staff, customers, and partners
• Grow and manage a security team over time as needed to support Tendo and customer needs